Tome Wave (“we”, “our”, “us”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website tomewave.com, make a purchase, or contact us.
This Policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, applicable to all users within the United Kingdom.
1. Who We Are
Tome Wave is an independent online retailer of crime and thriller novels based in Peterborough, United Kingdom.
We act as the Data Controller of your personal data when you interact with our website and services.
2. Information We Collect
We collect the following types of information to process orders, improve our services, and provide customer support:
a) Personal Information
Full name
Billing and delivery address
Email address
Phone number
b) Payment Information
Partial payment card details (processed securely by our payment partners; we never store your full payment information).
c) Technical Data
IP address
Browser type and version
Device type and operating system
Website usage data (pages visited, time spent, referral sources).
d) Marketing & Communication Data
Your preferences for receiving marketing communications
Feedback, messages, and reviews you submit to us.
3. How We Use Your Information
We process your personal data for the following purposes:
Order Processing: To confirm, fulfil, and deliver your book purchases.
Customer Support: To respond to your queries, complaints, or requests.
Marketing: To send you promotional updates, newsletters, and offers (only with your consent).
Improvement: To analyse website performance and enhance user experience.
Legal Compliance: To comply with UK laws and prevent fraudulent or illegal activities.
4. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
Contractual Necessity – when processing is required to fulfil your order or provide a service.
Legitimate Interests – to improve our website and communication with customers.
Consent – for sending marketing emails or newsletters (you can withdraw at any time).
Legal Obligation – for record-keeping and compliance with tax or accounting laws.
5. How We Store and Protect Your Data
We use secure servers and encryption technologies to protect your personal data. Access is strictly limited to authorised staff members who require it for business operations.
Your data is stored in the United Kingdom and may be processed by third-party service providers under strict contractual data protection terms.
We retain your data only as long as necessary for the purposes described in this policy, typically:
Order records: 6 years (as required by UK tax law)
Marketing data: Until you unsubscribe or request deletion
6. Sharing Your Information
We do not sell, rent, or trade your personal information. However, we may share limited data with trusted third parties who assist in providing our services:
Payment processors (for secure transactions)
Delivery and courier partners (for shipping orders)
Email marketing platforms (for newsletters, with consent)
We aim to respond to all legitimate requests within 30 days.
8. Cookies and Tracking Technologies
Our website uses cookies to improve functionality and personalise your experience. Cookies help us:
Remember your cart and login preferences
Analyse site traffic and performance
Deliver relevant offers or recommendations
You can manage or disable cookies through your browser settings at any time. For more details, please refer to our Cookie Policy (available on our website).
9. Marketing Communications
If you subscribe to our newsletter or marketing list, we will use your email address to send updates about new releases, offers, and author features. You can unsubscribe at any time using the link in any email or by contacting us directly.
10. Data Transfers Outside the UK
If any of our service providers are based outside the UK, we ensure appropriate data protection safeguards, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO).
11. Links to Other Websites
Our website may include links to external sites or partner pages. Please note that we are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies before sharing any personal data.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any updates will be posted on this page with the revised “Last Updated” date. Significant changes will be communicated via email if you have an active account with us.
13. Contact Us
If you have any questions, concerns, or data access requests, please contact us:
If you believe your data has been mishandled, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) via www.ico.org.uk
